removed enhanced by comments
parent
53260b49b9
commit
75ed275328
|
@ -55,4 +55,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tCNAME\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/13
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tCNAME\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/13
|
||||
|
||||
|
|
|
@ -27,4 +27,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tTXT\t(.+)"
|
||||
|
||||
# Enhanced by md on 2023/04/20
|
||||
|
||||
|
|
|
@ -170,4 +170,4 @@ dns:
|
|||
words:
|
||||
- ".iidns.com"
|
||||
|
||||
# Enhanced by mp on 2022/03/13
|
||||
|
||||
|
|
|
@ -23,4 +23,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tDS\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -23,4 +23,4 @@ dns:
|
|||
- "ec2-[-\\d]+\\.compute[-\\d]*\\.amazonaws\\.com"
|
||||
- "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -48,4 +48,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tCNAME\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -29,4 +29,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tMX\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -82,4 +82,4 @@ dns:
|
|||
- "mx1-us1.ppe-hosted.com"
|
||||
- "mx2-us1.ppe-hosted.com"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -26,4 +26,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tNS\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -26,4 +26,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tPTR\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -22,4 +22,4 @@ dns:
|
|||
- "SERVFAIL"
|
||||
- "REFUSED"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -24,4 +24,4 @@ dns:
|
|||
- " ptr "
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -28,4 +28,4 @@ dns:
|
|||
regex:
|
||||
- "IN\tTXT\t(.+)"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -22,4 +22,4 @@ dns:
|
|||
words:
|
||||
- "69.164.223.206"
|
||||
|
||||
# Enhanced by mp on 2022/03/14
|
||||
|
||||
|
|
|
@ -20,4 +20,4 @@ file:
|
|||
words:
|
||||
- "android:allowBackup=\"true\""
|
||||
|
||||
# Enhanced by mp on 2022/02/09
|
||||
|
||||
|
|
|
@ -21,4 +21,4 @@ file:
|
|||
words:
|
||||
- "nodeIntegration: true"
|
||||
|
||||
# Enhanced by mp on 2022/05/19
|
||||
|
||||
|
|
|
@ -24,4 +24,4 @@ file:
|
|||
- 'ProgrammingError'
|
||||
- 'OperationalError'
|
||||
|
||||
# Enhanced by mp on 2022/10/05
|
||||
|
||||
|
|
|
@ -41,4 +41,4 @@ file:
|
|||
- 'near \"\*\"\: syntax error'
|
||||
- 'SELECTs to the left and right of UNION do not have the same number of result columns'
|
||||
|
||||
# Enhanced by mp on 2022/10/12
|
||||
|
||||
|
|
|
@ -51,4 +51,4 @@ file:
|
|||
- 'window\.name'
|
||||
- 'document(\.URL|\.referrer|\.documentURI|\.baseURI|\.cookie)'
|
||||
|
||||
# Enhanced by mp on 2022/09/14
|
||||
|
||||
|
|
|
@ -123,4 +123,4 @@ headless:
|
|||
- "Evil.Com - We get it...Daily."
|
||||
condition: and
|
||||
|
||||
# Enhanced by cs on 2023/03/10
|
||||
|
||||
|
|
|
@ -93,4 +93,4 @@ headless:
|
|||
kval:
|
||||
- alerts
|
||||
|
||||
# Enhanced by mp on 2022/09/14
|
||||
|
||||
|
|
|
@ -31,4 +31,4 @@ http:
|
|||
- "login_met_cookie($metinfo_admin_name);"
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/07/05
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ http:
|
|||
- "Choose Language (选择语言)"
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/01/26
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ http:
|
|||
- 'USER'
|
||||
condition: and
|
||||
|
||||
# Enhanced by cs on 2022/02/28
|
||||
|
||||
|
|
|
@ -53,4 +53,4 @@ http:
|
|||
- 'contains(body_2, "Windows IP")'
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -29,4 +29,4 @@ http:
|
|||
regex:
|
||||
- "root:.*:0:0:"
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
- "display_errors"
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/07/22
|
||||
|
||||
|
|
|
@ -66,4 +66,4 @@ http:
|
|||
- '(\d{4}-\d{2}-\d{2})\\/([a-f0-9]+\.txt)'
|
||||
internal: true
|
||||
|
||||
# Enhanced by mp on 2022/05/30
|
||||
|
||||
|
|
|
@ -31,4 +31,4 @@ http:
|
|||
- 'status_code == 200'
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/05/18
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/09/30
|
||||
|
||||
|
|
|
@ -34,4 +34,4 @@ http:
|
|||
- "ctpDataSource.password"
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/07/22
|
||||
|
||||
|
|
|
@ -49,4 +49,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -49,4 +49,4 @@ http:
|
|||
- DB_PREFIX
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ http:
|
|||
- "extensions"
|
||||
condition: and
|
||||
|
||||
# Enhanced by cs on 06/03/2022
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
words:
|
||||
- "http"
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/05
|
||||
|
||||
|
|
|
@ -43,4 +43,4 @@ http:
|
|||
regex:
|
||||
- '"role":"super_admin",(["a-z:,0-9]+),"lastpwdtime":'
|
||||
|
||||
# Enhanced by mp on 2022/03/28
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/17
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/23
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/16
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -49,4 +49,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -49,4 +49,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by cs on 2022/07/05
|
||||
|
||||
|
|
|
@ -47,4 +47,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by cs on 2022/02/28
|
||||
|
||||
|
|
|
@ -48,4 +48,4 @@ http:
|
|||
- "contains(body_2, 'Windows IP')"
|
||||
condition: and
|
||||
|
||||
# Enhanced by mp on 2022/05/12
|
||||
|
||||
|
|
|
@ -39,4 +39,4 @@ http:
|
|||
words:
|
||||
- 'c8c605999f3d8352d7bb792cf3fdb25'
|
||||
|
||||
# Enhanced by mp on 2022/09/28
|
||||
|
||||
|
|
|
@ -34,4 +34,4 @@ http:
|
|||
words:
|
||||
- "_vti_bin/shtml.dll"
|
||||
|
||||
# Enhanced by mp on 2022/01/27
|
||||
|
||||
|
|
|
@ -48,4 +48,4 @@ http:
|
|||
words:
|
||||
- "text/html"
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -40,4 +40,4 @@ http:
|
|||
words:
|
||||
- "text/html"
|
||||
|
||||
# Enhanced by mp on 2022/01/27
|
||||
|
||||
|
|
|
@ -34,4 +34,4 @@ http:
|
|||
- '(<a href="/names\.nsf/[0-9a-z\/]+\?OpenDocument)'
|
||||
part: body
|
||||
|
||||
# Enhanced by mp on 2022/05/04
|
||||
|
||||
|
|
|
@ -39,4 +39,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/18
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
words:
|
||||
- "'>\"</script><script>alert(document.domain)</script>"
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -38,4 +38,4 @@ http:
|
|||
words:
|
||||
- text/html
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -39,4 +39,4 @@ http:
|
|||
words:
|
||||
- "text/html"
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -34,4 +34,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -41,4 +41,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/05/10
|
||||
|
||||
|
|
|
@ -42,4 +42,4 @@ http:
|
|||
words:
|
||||
- "text/html"
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -38,4 +38,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/29
|
||||
|
||||
|
|
|
@ -42,4 +42,4 @@ http:
|
|||
- 200
|
||||
|
||||
|
||||
# Enhanced by mp on 2022/08/31
|
||||
|
||||
|
|
|
@ -40,4 +40,4 @@ http:
|
|||
- "text/html"
|
||||
part: header
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -39,4 +39,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -37,4 +37,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/22
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/30
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -45,4 +45,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by md on 2022/12/08
|
||||
|
||||
|
|
|
@ -37,4 +37,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -41,4 +41,4 @@ http:
|
|||
status:
|
||||
- 500
|
||||
|
||||
# Enhanced by md on 2022/09/20
|
||||
|
||||
|
|
|
@ -30,4 +30,4 @@ http:
|
|||
regex:
|
||||
- "root:.*:0:0:"
|
||||
|
||||
# Enhanced by mp on 2022/04/18
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -41,4 +41,4 @@ http:
|
|||
regex:
|
||||
- "root:.*:0:0:"
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -43,4 +43,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/08/12
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/07/06
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/06/08
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/06/08
|
||||
|
||||
|
|
|
@ -35,4 +35,4 @@ http:
|
|||
words:
|
||||
- "http"
|
||||
|
||||
# Enhanced by mp on 2022/06/06
|
||||
|
||||
|
|
|
@ -36,4 +36,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/06/08
|
||||
|
||||
|
|
|
@ -30,4 +30,4 @@ http:
|
|||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
|
||||
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -54,4 +54,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/02
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -33,4 +33,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -31,4 +31,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by mp on 2022/03/30
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -32,4 +32,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
|
@ -31,4 +31,4 @@ http:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# Enhanced by mp on 2022/02/13
|
||||
|
||||
|
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue